Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/KXyQLecy_EWhia2i_496NAWHND4.roa
File: KXyQLecy_EWhia2i_496NAWHND4.roa (raw, json)
Hash identifier: KtRuOg4Yf5njyQrDtYuSLKvrx45wCXNY3Q8TWiIHhwM=
Subject key identifier: 29:7C:90:2D:E7:32:FC:45:A1:89:AD:A2:FF:8F:7A:34:05:87:34:3E
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 0D04
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KXyQLecy_EWhia2i_496NAWHND4.roa
Signing time: Mon 01 Apr 2024 10:21:27 +0000
ROA not before: Mon 01 Apr 2024 10:21:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 63199
IP address blocks: 2400:5280:2000::/38 maxlen: 38
2400:5280:3c00::/38 maxlen: 38
2400:5280:4400::/38 maxlen: 38
2400:5280:4800::/38 maxlen: 38
Validation: Failed, certificate revoked on Wed 10 Apr 2024 06:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: Apr 1 10:21:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=297C902DE732FC45A189ADA2FF8F7A340587343E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:fa:26:14:b1:a6:6f:9f:86:99:94:81:52:
37:c6:2b:6c:ca:5c:9d:5d:49:29:27:6f:71:de:7d:
e4:a7:21:82:d8:03:ca:3a:d1:f9:d6:2f:96:27:29:
b0:f7:72:ce:fe:d9:5c:50:23:1e:ff:42:4d:35:94:
3f:68:03:51:79:af:78:a7:37:f8:0d:4c:43:ad:e2:
78:2d:e9:db:1b:e1:59:df:5a:3b:f2:5f:94:06:c7:
d8:c6:04:67:71:3e:79:52:b4:fc:ee:e6:da:7f:51:
46:9a:60:bc:bf:c4:2f:12:85:ef:b5:1e:f0:2f:db:
39:f0:f0:f5:c5:98:e4:18:8e:5c:41:50:c5:66:f2:
4e:79:2c:0d:08:10:29:f8:f9:f1:b3:86:9a:af:a3:
d8:f7:d3:9e:89:e8:15:ee:d0:9a:b3:78:67:c2:54:
f5:5f:17:ca:ad:b1:34:c5:09:a3:87:56:66:06:85:
fc:1f:fc:c6:6f:f8:ed:c8:9c:ab:0f:2e:5f:66:ff:
06:f3:8c:56:36:8f:32:26:ac:8d:1d:58:12:6c:7b:
93:43:83:1e:49:37:39:59:e3:ad:cc:a6:3d:ef:8b:
3d:5b:a0:1a:0f:bf:94:d6:e3:4c:62:c4:e8:19:69:
f3:9e:e4:b8:2e:53:ac:51:2d:bf:77:5b:36:8c:95:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:90:2D:E7:32:FC:45:A1:89:AD:A2:FF:8F:7A:34:05:87:34:3E
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KXyQLecy_EWhia2i_496NAWHND4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5280:2000::/38
2400:5280:3c00::/38
2400:5280:4400::-2400:5280:4bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:f5:ea:5f:92:3e:a4:1c:f5:7b:46:d9:47:e7:48:6e:40:16:
d1:f8:9e:a5:5a:e6:78:26:45:13:3b:b8:2b:0d:37:b5:a9:26:
a1:f0:ae:83:3e:39:13:0e:eb:37:39:24:1a:67:35:76:3c:b4:
f7:6c:90:0b:2c:cc:42:b2:ba:ba:1b:c8:04:4f:65:fd:7b:e0:
db:95:62:b9:0f:76:47:fb:9d:44:0b:8f:94:c6:86:9c:84:77:
ea:db:11:68:2b:24:25:9d:46:9a:d0:2f:e7:61:23:ad:bd:ea:
4e:c1:98:83:7e:4e:4b:99:07:8d:90:36:c8:bb:11:76:d5:b6:
18:dd:33:a9:44:f4:ea:8d:63:b2:7e:08:b6:a8:f9:6d:dd:5e:
45:05:71:19:d3:1f:22:c1:e3:a8:15:0d:f8:74:5e:c8:56:e8:
ff:5d:e2:bc:ea:bf:a2:a7:c2:53:08:0d:00:bd:5f:4d:bd:41:
24:f9:f9:1c:21:34:1a:04:fa:47:34:95:4e:85:f0:c5:3c:f3:
29:6f:4c:1e:ea:ed:ed:23:c1:08:44:fe:af:6b:e4:eb:5c:81:
ab:c8:a2:e6:7c:ff:50:cc:8c:7a:ca:b6:df:d8:16:c4:e4:9f:
f1:4b:3f:7f:08:17:b3:9a:d2:93:e7:51:7e:cc:22:3e:0f:f4:
08:af:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 08:38:49 2024 by rpki-client on console-fra.rpki-client.org